iPharMA Research Privacy Notice

Any personal data which you provide to the University as part of this research project will be treated with the highest standards of security and confidentiality, in accordance with Irish and European Data Protection Law. This Notice sets out details of the information that we collect, how we process it and who we share it with. It also explains your rights under data protection law in relation to our processing of your data.

1.            Title and Purpose of the research project

1. 1. iPharMA -Mapping current capabilities and future needs of Biopharma Manufacturing and related activities in Ireland.

2.            Research Ethics Committee

2.1          Ethical approval was granted by the Faculty of Science & Engineering Research Ethics Committee on 23rd July 2021.

The research ethics approval number is 2021_07_02S&E

3.            Identity of the Data Controller(s)

3.1          The Data Controller/Independent Controller is

• University of Limerick, Plassey, Limerick.
• Dr Brian Kelly, Pioneer Scientific Consulting Ltd, 21 Obelisk Rise, Blackrock, Co. Dublin

4.            Identity and Contact Details of the Data Protection Officer of the Data Controller(s)/

4.1          You can contact the University of Limerick’s Data Protection Officer at dataprotection@ul.ie or by writing to Data Protection Officer, Room A1-073, University of Limerick, Limerick. 

5.            The Identity of the Principal Investigator

5.1          The Principal Investigator for this Research Project is Marlo Kearney, Business Development Manager, PMTC.

6.            How we will use your personal data

6.1          The University must process your personal data in order to undertake research relating to this project/study.  Your data is to be collected in the form of a survey delivered in conjunction with Enterprise Ireland and the IDA and facilitated by an external consultancy company, Pioneer Scientific Consulting. This data is to be collected, as part of the overall data set within this given research project, and stored confidentially by the Pharmaceutical Manufacturing Technology Centre, an Enterprise Ireland funded research centre, hosted at the University of Limerick. Your personal information will not be shared publicly save between PMTC, IDA and Enterprise Ireland and will not form any part of the analysis of the overall data collected. The personal information collected as part of this survey will only be used for the purposes of recording contact details of respondents to the survey.

6.2          The personal data collected and used in this research will include the following:  Your Name, Your Email Address, Position within your Organisation, Telephone Number.

6.3          You provide us with your personal data to enable us to undertake the research project. Participation in this research project is voluntary and participants may withdraw without giving any reason.  Should you wish to withdraw, you may do so by contacting the Principal Investigator at +353 86 066 2135 or in writing to marlo.kearney@ul.ie

7.            Lawful Basis for University Processing Personal Data

7.1          Data Protection Law requires that the University must have a valid legal reason to process and use your personal data. This is often called a ‘lawful basis’. GDPR requires us to be explicit with you about the lawful basis upon which we rely in order to process information about you.

7.2          The University is carrying out this research in the public interest and for scientific, historical or statistical purposes. In doing so, we are relying on Article 6(1)(e) of the GDPR. Where we are processing special category or sensitive personal data, we are relying on Article 9(2) (j) of GDPR. As required under Data Protection Law, we have appropriate safeguards in place in order to protect your personal data; these are set out in the next section.

8.            Protecting Your Personal Data

8.1          We have the following measures in place to help ensure we keep your personal data safe:

• • All researchers at the University must adhere to University policies and procedures that tell our staff and students how to collect and use your information safely;
  • Training is made available to all researchers to ensure our staff and students understand the importance of data protection and how to protect your personal data;
  • The University has security arrangements and technical measures in place that ensure your information is stored safely and securely;
  • All research projects involving personal data are reviewed and approved by a research ethics committee in line with University policies and procedures;
  • Where a research project may involve a high risk, we first carry out a data protection  impact assessment to assess risks and ensure adequate safeguards are in place;
  • Where your personal data is processed for health research, we will always obtain your explicit consent in advance (in line with the Health Research Regulations 2018).

8.2          Personal data collected for this research project will be pseudonymised within 12 months after collection and will be fully anonymised after 12 months. Truly anonymised data is not Personal Data. Once data is anonymised for the purposes of this research project, the terms of this Privacy Notice will no longer apply.

9.            Sharing Your Personal Data with Third Parties

9.1          The University will not disclose your personal data to third parties. [Anonymous data may be shared with third parties. In this situation, you will not be identifiable from any data we share with the third party.]

11.          How Long Will We Keep Your Data

11.1        All Personal Data collected for this research project will be retained for 12 months.

12.          Your Rights

12.1        Depending on the lawful basis which we rely on to process your Personal Data, you may have the right to request that we:

• provide you with information as to whether we process your data and details relating to our processing, and with a copy of your personal data;
• rectify any inaccurate data we might have about your without undue delay;
• complete any incomplete information about you;
• under certain circumstances, erase your Personal Data without undue delay;
• under certain circumstances, be restricted from processing your data;
• under certain circumstances, furnish you with the Personal Data which you provided us within a structured, commonly used and machine readable format;

12.2        Requests for any of the above should be addressed by email to the Principal Investigator at marlo.kearney@ul.ie AND the Data Protection Officer at dataprotection@ul.ie. Your request will be processed within 30 days of receipt. Please note, however, it may not be possible to facilitate all requests, for example, where the University is required by law to collect and process certain personal data including that personal information that is required of any research participant.

12.3        It is your responsibility to let the Principal Investigator know if your contact details change.

13.          Queries, Contacts, Right of Complaint

13.1        Further information on Data Protection at the University of Limerick may be viewed at www.ul.ie/dataprotection. You can contact the Data Protection Officer at dataprotection@ul.ie or by writing to Data Protection Officer, Room A1-073, University of Limerick, Limerick.

13.2        You have a right to lodge a complaint with the Office of the Data Protection Commissioner (Supervisory Authority). While we recommend that you raise any concerns or queries with us first at the following email address marlo.kearney@ul.ie you may contact that Office at info@dataprotection.ie or by writing to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Should you wish to download a copy of this privacy notice, it is available for download here